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Foreword 


As a part of the Reserve Bank of India’s customer awareness initiatives, in July 
2021 this office had published a booklet ‘Be(A)ware’ on the modus operandi of 
financial fraudsters. Encouraged by the positive response received from members 
of the public as well as different institutions, we take forward the idea of financial 
education, to be more accessible to those who have just begun their journey inta 
digital financial world and are not so well-versed with the nuances of online financial 
transactions. This includes people from different ages and education levels such 
as school children, young adults, semi-literates and senior citizens, irrespective of 


whether they live in urban, rural or semi urban areas. 


Continuing the “Be(A)ware’ series, this booklet ‘Raju and the Forty Thieves’ is 
a manifestation of our efforts. The booklet is an easily understandable pictorial 
depiction of incidents happening around us and helps us to learn how to keep 


hard-earned money and ourselves safe from fraudsters. 


As the name suggests, ‘Raju and the Forty Thieves’ contains forty such stories 
providing glimpses of fraudulent events being reported to us and provides simple 
tips about DOs and DON'Ts. Raju is a typical gullible citizen, and, in these 
stories, he appears in different characters, some time as a senior citizen, some time 
as a farmer, sometimes as a happy-go-lucky guy, etc., although with same curly 


hair always to identify with different walks of life. 


Let us make ourselyes aware of such modus operandi used by fraudsters and educate 
those around us to be aware of such financial frauds. ‘The tireless efforts put by the 
team of RBI Ombudsman, Mumbai-II, Maharashtra and Goa, to spread financial 
literacy by preparing such booklets during covid period, is gratefully acknowledged, 


The readers are requested to share their feedback and suggestions, if any, to 


bomumbai2@rbi.org.in. 


Be Aware and Beware! 


* 
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1, FRAUD THROUGH PHISHING LINKS 


ry Raju clicked on the link, but the link to 
One day, Raju received message update KYC details did not work. Soon, he 
gets a call. 


on his phone: ‘Dear customer, if your KYC 
details are not updated within two days, your 
account will be blocked. Use the below link to 
update the details at http://updateKYC_XYZbank.com’ 


Raju: “Oh! All my money will be blocked: 
Ineed to update my KYC details.” 


| calling from XYZ bank. Are ' 
H you facing any issues in ‘ : 


| updating your KYC details?” ae 


* |Raju: “Yes, the link 
is not working." 


Fraudster: “The website load might 
be high; I will update the details 
manually. Please share your 

username, password and OTP." 


Do's: 

v Always cross-check the KYC status with your home branch or through your relationship manager when 
you receive calls, links or SMS from unknown sources requesting you to update KYC. 

v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting 
Portal at https://cybercrime.gov.in 
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Raju: "Okay, I have texted Fraudster: “Your KYC 
you all the details.” | details are updated 
1 successfully.” 


After some time, Raju received SMS alerts on his phone stating that 
Rs 50,000 was debited from his account. 


Raju immediately called the other person, but he didn't answer the calls. Raju realized 
that the person was a fraudster and he should not have shared any personal details 
with him. 


Don'ts: 
Don't click on unknown/unsolicited links received on the phone/email without verifying it. 


x Don't share your confidential details with strangers. 
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2. VISHING CALLS 


One day, Raju received a call, 


Fraudster: “Hello Sir, Iam 


calling from XYZ Bank.” 


Raju: “Hi, what 
is the matter?” 


Froudster: “This is regarding your 
insurance policy. Your policy is 
‘octivated, and you need to pay 

Rs18000 as a premium.” 


ae wie] AN 
insurance with XYZ bank.” \ 


Fraudster: “Sir, it got activated 
‘5 a promotional offer at a very 
low fee. But if you don't need it, 
Twill deactivate it.” Raju: “I don't understand how you | 
activated the policy without my 
consent, and why should | 
T trust you?" 


Froudster: “Sir, am calling you directly from the XYZ Bank | 
customer care. I have all your details like Name, Address, 
Card details, DOB, Company Name and Designation.” 


Raju: "Okay, so tell me 
how to deactivate 
the policy?” 


Dos: 
v Always cross-check with your relationship manager or bank branch about any issue before trusting anyone. 
v_ OTP is like a key to your safe wealth, so always keep it away from fraudsters. 


Y Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal 
at httpsi//cybercrime.gov.in 
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Fraudster: "I will deactivate it online from here. Please share the OTP 


Raju: "Yes, I got the 
OTP. It is 859623." 


A few minutes later, Raju received a message alert. 


Frssicbeea cE ban sec tet ie "Rs-15000/- is debited from your account 


the policy, Sin" 


Raju: “Thank youl” \ 


Raju immediately visited the nearby XYZ branch and enquired about the transaction. 
Raju realized his mistake: the call was from a fraudster; 
he should not have believed a stranger. 


Don'ts: 
x Don't trust unknown callers claiming to be speaking on behalf of banks asking for confidential 
information / details. Banks don't seek such details over phone. 


x Never trust strangers in the digital world easily, and be cautious while answering calls from 
unknown numbers. 


3. FRAUD USING ONLINE MARKETPLACES 
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Raju wanted to dispose of sofa set. He posted the 
advertisement on the website which is an online 
marketplace for second-hand goods. 


Tnmediately after posting the advertisement, there was an 
enquiry from a fraudster of fering to pay Rs 15,000/- 
for the sofa set. Raju felt very happy after getting on of fer. 


fFraudster: “will pay online before| 
picking up the furniture.” 


Raju: “My account 
number is 123xxx67." 


The fraudster sent Rs10/- to Raju's account and asked for 
confirmation for the final payment. 


Do's: 


//eybercrime.gov.in 


vv Always remember, UPI PIN is required only to make a payment and is not required to receive any payment. 
Always verify the mobile number in the UPI application before initiating a payment. 
AREY PEE SINISE AGNES SCRE IAS OL al) 
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Then the fraudster sent a UPI request for receiving a payment of 
Rs 14,990/- instead of paying Raju. 


Raju: “It is asking for my PIN: 
why should I enter the pin?" 


Raju entered the pin immediately, 


Fraudster: "As per bank rules, | ; 
the PIN needs to be entered and his account was debited for Rs14,990/ 


Realizing that he was cheated, Raju quickly approaches the bank branch and 
registered a complaint on the same day. 


Don'ts: 
X Don't share OTP or confidential account details with strangers. 
X Don't enter the UPI PIN to receive an amount from another person. 
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4, CREDIT CARD ANNUAL FEE 
WAIVER- FAKE OFFER 


‘One. day, Raju received a call from an unknown number. 


Fraudster: “Good morning, Mr Raju! 
Tam Rohit Kumar from your Bank 
customer care. We are happy to 
inform you that your credit card 
annual fee will be waived for 
this year as you are one of 
our most valuable customers.” 


Raju: “Oh! 
That's great news.” 


Fraudster: "Mr Raju, Please 
confirm a few details before 
Tcan proceed further. Your 
card number is 42781234 XXXX, 
and your full name is Raju 
Deshpande, right?" H 


The fraudster had already gathered Raju's card details from 
illegitimate sources, 


Raju: “Yes, these 
are correct.” | 


Fraudster: "Mr Raju, now you _— 
will receive an OTP. Please [__ 7 _ 
share it with us so that we 1 - 

can waive the fee at our end.” 


KX 


Do's: 
v Be cautious while responding to calls from unknown numbers claiming to be from your bank. 
Report to your Homebranch immediately on realizing the fraud. 
¥ Block your card to prevent further financial loss. 
¥ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal at 
https://cybercrime.gov.in 
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Raju reasoned that since the caller already knew his card details, the call must be 
genuine. He shared the OTP with the fraudster immediately. 


Froudster: "Thank you, Mr Raju. Your 
onnwal fee is waived off. Have a great day!" 


route ous cits eels oo ae Raju immediately called the fraudster, but his phone was 


debited from his credit card account. switched off, 


THE NUMBER You ARE 
TRIzNe To CAL 
bs sustT CHEO-OFF. 


_— (LENSE CALL LATER. 


Raju realized the person was a fraudster, and he should not have shared 
the OTP with him. 


Don'ts: 
X Don't share your OTP with anyone. Fraudsters might be able to collect your account details, 
but transactions can only happen if you share the confidential OTP sent to your phone, 
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5. ATM CARD SKIMMING FRAUD 


Raju receives his monthly salary in/his account. He visits on ATM Affera few hows, Raju gets SMS clerts for afew 
fornitiirae money.tor hits monthly expenses more debit transactions. (Rs 15,000/- is debited from 
your account. Rs 12000/- is debited from your account.) 


click! 


Raju: “This SMS is about a 
‘transaction with my ATM card, But 
Thave used it only once today.” 


Rajuwithdraws the money, and he gets an SMS alert for 
his transaction. 


Raju tells his daughter about the SMS alert: 


Daughter: "What was your 
last transaction, papa?” 


Daughter: “Let me first block your ATM card. 
We can easily block it through your Mobile 
Banking App. 


Daughter: We will also request 
your bank to block your bank 
account. K 


Daughter:Also, did you share any 

of your bank or ATM card details § _———~ 

with anyone? Or did you share 
your OTP?" 


Do's: 
v Before initiati transaction in the ATM machines, ensure that skimming devices are not present. Skimming 
devices are hidden by fraudsters by overlapping them with the card insertion slot. 
v Repoat ie ve to sb bank within 3 days of the card cloning incident.Check your transaction history frequently 
fo all transactions. 
‘Y Report the incident to the nearest Cyber Crime Police Station arid National Cyber Crime Reporting Pertal at 
(https://cybercrime.gov.in) 
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Raju: “No, Beta! I did not share 
any details with anyone.” 


Daughter: "We must go to the ATM 
where you withdrew the money.” 


Daughter: “Look at this, Papa! 
There is a skimming device near 
the card insert slot." 


Raju: “What is this 
skimming device? And 
how do you recognize 
that?" 


Daughter: "Skimming device is a card reader |) 
that collects card numbers which are 
then replicated into counterfeit cards 
used for illegal ATM cash withdrawals.” 


Don'ts: 
% Don't give your ATM card to anyone on the ATM premises to transact on your behalf. This kind of social 
engineering is being used to target senior citizens/semi-educated persons who have difficulty 


operating ATMs. 
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6. FRAUD USING SCREEN SHARING 
APP/REMOTE ACCESS 


Fraudster: “Hello Sir! Good Morning. 
Tam calling from ABC Gaming 
Corporation. We are delighted to 
offer you a cash reward for playing 
an online game.” 


At first, Raju doubted that the person might be a fraudster and remained silent. 


Fraudster: “Sir, am an employee of the company which makes 
online games, and this is a beta version of the new game we 
have developed. We need feedback from users before 
launching the game to the public. So, we are inviting 
gamers to download this app, play games and give us feedback 
for improvement. We will be giving you Rs 10,000/- 
for this.” X 


Raju: *T have successfully downloaded 

Raju:"Oh Wow'T ||| | _ the app. What should T do next?* 
will get a cash 

reward for playing || | Fraudster: "Sir, you will see a 
the game. From || |! code for logging into the app. 

— where do T install Please share it with us.” 

— this game?” | 


Fraudster: “Sir, I have 
shared the link to 
download the app. You 
‘can log in with the. 
User Td-XXXXX@ ABC.com 
‘and password- MNOPQRS.” 


Raju: “What? Code? Is | 
this like an OTP for 
financial transactions? 


Do's: 
Verify the authenticity of the offer on the official website of the entity concerned, 
Tnstall antivirus/spam blocking software on your mobile phone. 


vy Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal 
at https://cybercrime.gov.in 


S46 
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Fraudster: "Oh nol How can it be, Sir? You haver't shared your account/card 
details with us. This is just an entry code for the opening game.” 


O% 


Raju: "Oh, that's right. 
xxxxx is the entry code." 


Fraudster successfully installed the screen-sharing app in | | Raju thinking that it was just a matter of Rs 10/- transferred 
Raju's mobile and gained access to his phone. He could the amount through Net Banking. Soon he received debit 
read the messages on Raju's mobile and track his keypad. messages of Rs 35000, Rs 20000 and Rs 40000, 


Fraudster: “Sir! We would be| 


giving yo 
Rs 10000 fe participation | ad 
ore 
that please pay Rs 10 to —— —] Raju: "Oh my God! How 
thececount A — “did this happen! I 
112345 through net banking to-—>~ he not shared OTP." 
ce es jst sre ay 0 
Please call me once done.” 


ARTY 
= f-oo%* 


NAME * = a 


Ac, NO: 
40,009 


amount: ceaed Moaker #20 


BENEFICIARY © 


Once the screen-sharing application was installed, the fraudster had access 
to the net banking password entered by Raju for making the payment (of Rs 10.) 


Don'ts: 
% Don't download any applications over links sent through SMS, Email or instant messaging applications. 
Don't download screen-sharing applications shared by any unknown persons. 

Screen sharing codes generated by these apps should not be shared with unknown persons. 
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7. SIM SWAP/ SIM CLONING 


Fraudster: “Hello Sir, 

Tam calling from ABC telecom company. 

We are offering you a SIM card upgrade 
for better internet connectivity 

and more data,” 


| Fraudster: "You must share 

| with us basic details 

| like your Aadhaar Card number 

| and unique 20-digit SIM card 

| number. Thereafter, you will | 
get a text. Reply 

| _ toactivate the offer.” 


Raju: “What should I 
= do to avail 
this benefit?” 


Do's: 
v Verify the status of the SIM card with your Telecom Service Provider when in doubt 
instead of believing unknown callers, 


v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Raju shares the details with the caller. 


Raju: "What has happened 
to my mobile! There is no 
network, and I am not able 
to make calls, 
send messages, etc." 


Fraudster uses the new SIM to retrieve the username 
for the banking application by using options like Forgot| 
Username, reset password etc. and transfer all the 
money to his account. 


After a few minutes, when Raju received emails showing cash debits from his bank 
account, he checked his bank account balance. He noticed that some unauthorized 
debits were made from his account for which no SMSs were received on his registered 
mobile number as the STM was compromised to transfer funds, shop online, etc 


G 


Don'ts: 


x Don't share confidential details like Aadhaar number and SIM number with unknown callers.| 
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8. FRAUDS BY COMPROMISING CREDENTIALS 
THROUGH SEARCH ENGINES 


Raju is fond of watching cricket, and he was very excited about the upcoming cricket match. But as soon as he opened the 
he realised that his subscription had expired. 


Raju thinks: "What is the big deal! | 
The Internet has all the solutions.” 


i 


Thinking this, he searched for a way to recharge the Sports App on 
the intemet. After searching for a while, he found a phone number 
for the same. Raju dialled the number immediately. 


[ Raju: "Hello! T want to recharge my 
Sports account.” 


Fraudster: 
"Which plan 
do you need?” 


v Always obtain the contact details/customer service number, etc. from the official website 
of the service provider only. 

v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 


15 
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Fraudster: “You will get the payment link 
on your phone now. Please click and make 
the payment.” 


Raju - “Yes, I got the | 
——— _ payment link. I will 


a 
>) pay the amount now." 
Clicks 


Raju received an SMS stating that Rs 40,000 was Instead of paying Rs 1000 to Sports App, Raju ended up transferring 
debited from his account. Rs 40000 to the fraudster, 


Don'ts: 
x Don't contact random phone numbers obtained from web search engines, especially 
for doing financial translation. 


9. SCAM THROUGH QR CODE SCAN 
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Raju registered his old car on an online website to sell it. 


Within hours, he was contacted by a person (a fraudster) 


Fraudster: “Hi, I saw your car 

advertisement on the platform. 

T really liked it, and I am interested |< 
in buying your car.” j 


. 


Fraudster: “Oh! Don't worry’ a a) 


‘about the price. Iam an 
army personnel, and I om 
‘about to retire in a month. 
My son wants to purchase a 
cor, and he is insisting 
‘on buying this one only.” | 


|Reaju: “Glad you liked it 
= SP) My cons in excellent 
| condition. I am buying 


| anew car, so Tam 

2 selling this one. T 

] won't negotiate the 
price." 


inspet 
Twi 


cs 


Fraudster: “Sure, we want to 


as I don't want to lose the of fer." 


Raju: "That's great! T quess you want 
‘o check the car before buying it.” 


ct the car, but before that, 
ll send you a token amount 


RAK 


Do's: 

Educate yourself about QR codes before using them. 
Report the transaction immediately to your bank. 
Report the incident to the nearest Cyber Crime Polic: 
Reporting Portal at https://cybercrime.gov.in 


é Station and National Cyber Crime 
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Raju again receives a call from the Fraudster after 


Raju: “Okay, I will send you my account details, Please senda token | pepe’ 
amount of Rs, 10,000/- to seal the deal. You can send the amount by | 
NEPTRTSS, _ Fraudster: “Hello, I called you earlier. 


Thave been trying to transfer the 
amount for the last 10 minutes, but 
Tm unable to do so. Therefore, I will 


be sending you a QR code through 
email, Please scan the QR code so that 
‘T apt yor dete T can send you the amount.” 
Iwill transfer the 


{ Raju: “Okay, no problem. | 


T got the QR code; => 
|“ Twill scan it 


‘amount now. Thank you!" 


Raju scans the QR code and receives a pop-up request for UPI PIN, 


Thave scanned the QR code, 
but it is asking for my UPI 
PIN to proceed further.” 


Fraudster: "That is correct; 
you must enter your PIN 
to receive the money: 


Raju believed him and entered his UPI PIN. Subsequently, his account got debited with Rs 70,000. Raju received the SMS alert of the debit: 
He panicked, so he tried calling the fraudster, but his phone was switched off by then. 


Don'ts: 

x Don't enter your UPI PIN to receive money from another person. UPI PIN is required only 
for sending a payment, not for receiving. 

x Don't scan QR codes to receive any payment. QR code needs to be scanned for sending a 
payment, not for receiving Money. 
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Krishna: "Papa, I bought this for you with my first salary. 
‘A brand-new smartphone." 


Raju: "Thank you, beta 
But T really don’t know how 
to use it." 


|Krishna: "I will teach you to| 
use internet applications.” 


‘Soon Raju got accustomed to using social media: he started posting ‘One day, Rays Friend, Ramu messaged him on social media 
pictures, liking posts, sending friend requests and messages. ‘requesting Rs 10,000 for a medical emergency. Raju immediately 
at the payment to Ramu using the shared account details 


Do's: 

v Verify by calling/meeting the real person before making a payment. 

v_ Always check the account details before making any payment. 

v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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After a Few days, Ramu met Raju in person. 


| Ramu: “Hi Raju. Tt’s been 
[nee a 


Raju: “Are you okay now? What 
happened to you? What was 


/ 


/| Ramu: “Im perfectly | 
> fine: nothing has 
happened to me.” 


for the medical emergency, I had 
transferred Rs 10000 to you.” 


Raju: “Upon your request on social media 


Ramu: “But I never asked 
for help nor received 


any money from you." 


Raju: “Thinking the 
request on social medial 
was genuine, I have 
transferred Rs 10000 
toa fraudster. 
(Oh, I am duped!)" 


Don'ts: 


the public. 


x Don't keep your personal information like mobile number, email id and friend list open to 


* Don't accept friend requests/ follow requests from people you have never met in person. 
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11. JUICE JACKING — STEALING OF DATA 
THROUGH CHARGING CABLE 


Raju had to leave due to a medical emergency. 
He realizes that his phone battery is low. 


Raju: “Oh no! My battery got drained, 
and I don't have a charger." 


A fraudster installs a charging coble with a virus ond leaves it at the 
charging point in a public place. Raju notices the charging point with the 


Raju: “Hil Con T use 
charging cable and asks the fraudster if he can use it: 


your charging cable?” 


t 


Fraudster: "Why not 
Please use it.” 


Do's 

v Install anti-virus software on your mobile phone to protect it from unauthorized access. 
v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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While charging, the chargj 
Raju's mobile. 


During the next few days, the fraudster captured all details ‘One day, Raju receives SM5s/emails indicating 
entered by Raju on his mobile and got hold of vital bank details like unauthorized debits in his savings account. 
username, password etc 


Don'ts: 
x Don't use charging adapters/cables from strangers. 
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Fraudster . Tim Pankaj calling | 
from ABC. Congratulations on winning 
/ the ABC jackpot of Rupees 10 Lakh. 

T have sent you the jackpot details, 
You may contact the number 
mentioned therein to claim the prize. 


Excited, Raju called the number in the jackpot message which featured a fake 
audio of a Superstar congratulating him on the prize. 
He contacted the given number. 


Raju: "Hi, this is Raju. 
I was asked to contact you for 
claiming the ABC Jackpot. 
How shall I claim my jackpot?" 


Fraudster: "Congrats Rajul You must pay a delivery 
fee of Rs 1000 to be eligible to receive the prize. 
Thave shared our account details on your Message Ap Raju: °Hi, have paid the amount and sent 

umber. Please pay the amourt immediately ond call ne back you the details, When will T get my prize?” 


Unaware of this fraudulent activity, Raju paid the amount 
cand called him back 


| Fraudster: "Excellent Raju! 

| We have only a few more 
steps to complete before you 
| get the jackpot of Rupees 
10 lakh, You will have to pay 

a tax fee of Rs 25000 to 
claim the prize amount.” 


Do's: 


Verify the message received from unknown numbers before trusting them as members of any 
company or management team. 


Always verify lottery offers with official websites of such events. 


Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting 
Portal at https://cybercrime.gov.in 


a4 
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Raju waits for the jackpot for the next few days but receives 


Raju: “T have made no further updates. 


the payment.” 


Fraudster: "Thank you, Sir! ma 
You will receive your prize within if” * 
‘two days.” 


Don'ts: 
x Do not make payments without verification, expecting very high returns. 
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13. ONLINE JOB FRAUD 


Raju had lost his job recently and was very worried, He started looking for jobs on online. job portals, He updated his resume on 
various websites. 


‘One day, he got a call from a fraudste 


from X¥Z Company. Human Resource 


selected for a 


Raju: "Wow! Thank you for 


sele! 


Raju “Yes, may I 
know whom I am 
talking to?" 


Raju: “Okay, that’s nice. What is the next step?" 4 


Do's: 

v Verify the authenticity of the company or recruitment agencies before 
paying any money. Recruitment agencies generally do not charge 
candidates for hiring them. 

v Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in 
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Fraudster: “Nothing, You need to pay a one-time registration fee of 
Rs 5,000 as a security deposit for the of fice laptop, Since it is a 
work from home job, we will courier you the laptop." 


Elated with joy, Raju pays Rs 5,000 to the designated account, 
Fraudster: “Thank you, Sir. We will send the joining letter 
‘and laptop to your address in 3-4 days.* 


Raju “I have paid the 
security deposit. 
Please check it.” 


Despite waiting for several days, Raju did not receive any laptop. He tried calling on the number, but the number was always switched off 
He searched the company name online but did not Find anything. Raju eventually realized that he was defrauded of his hard-earned money. 


Don'ts: 
< Don't pay anyone under the pretext of a job. A legitimate company will never ask for| 


payment from a potential candidate for a job offer. 
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14. FAKE ACCOUNT NUMBER 


Raju was planning to buy a family insurance pol 
e from the office, he saw a small stall in the name of ABC Insurance: 


Raju: “That is great. 
What are the options 
available?" 


Raju: “Hello, T am planning 
‘to buy an insurance policy 
for my family.” 


‘come to the right place 
We have started this outlet 
! in public places especially for | 
launching new insurance 
hi 


Sales agent 
‘one for a family is the 
SURAKSHA plan in which you 
will get 2 lakh cover for 
‘@ premium of Rs10000." 


‘Raju: "‘Ohay! Twi discs thi wth my family ond let you know 


‘eles ogent “Sir, we have opened ths space etek only forty. yu 
ere ready Yo poy row, we wil give The palcy a a BO count 
‘Al yu nae Yo py wl be Rs 5,000 


Do's 

Cross-check an organization's credentials on a known database to see if they are genuine. 
Always approach registered offices for availing products. 

Funds are transferred solely based on account number. 

Fraudsters may give a genuine company name but give their own account number, 
always verify the account number with the company before making a payment. 
Report the incident to the nearest Cyber Crime Police Station and National Cyber 


Crime Reporting Portal at https://cybercrime.gov.in 
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Raju: “Okay. That's great. T will pay you right now, 
§ I must pay through the payment option on your site, right? 


Sales agent: "No Sir. This is a one-time special offer. 
You need to transfer the amount to this account: 
Account Number -12312312312; 

‘Account Name: ABC Insurance Company. 

Our of fice agent will deliver the policy 

documents to your home in seven days" 


Raju: “Okay. T have transferred 
the amount. Thank you.” 


The next day Raju noticed that the outlet was “We don't have any such outlet. Also, we have a specific payment 
gone, Even after 10 days, he did not option on our official website. We do not entertain any other 

receive any documents. : 

Raju called the ABC insurance company. 


Don'ts: 
Do not pay anybody without verifying the authenticity of the company. 
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15. FRAUD THROUGH EMAIL 


Raju pays the amount immediately without verifying the email ID A day later, Raju called Ramesh to enquire about his health. 


or account details. 


Raju: "Hey Ramesh, how are 
T hope you are fine now. 


Ramesh: "Hello Raju. I am fine. How are you? 
Youve called me after a very long time.” 


Do's: 
vy Verify with the person concerned before making any payment based 

on the email received. 
v Verify the email ID. 
v Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in 
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Raju: “What? You emailed me yesterday for money, 
cond I transferred the money. Don't joke with mel” 


{Rained “No ¥ didi Send ony’ 
| ell you nor have T got ony 
{money from yor 


Raju: “But it had the name Ramesh Bohra and Ramesh: “My email is Ramesh bohra@gmail.com: 
the mail ID Ramesh bora@gmail.com” someone tricked you by using a similar-looking name, 


(Raju was in shock after knowing this. His act of kindness made him a victim to a fraudster due to his negligence. 
He should have verified the email ID.) 


Don'ts: 
X Don't make payments on receiving requests from random emails or 
similar-looking email ids. 
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Fraudster: "Hello Sir. Tam calling from the customer care centre of XYZ Bank. We are launching 
a new product, MessageApp, It's a banking facility that provides 24*7 banking services easily 
through your MessageApp You will also receive a gift voucher when you use it for the first time 

Please confirm whether 99°*****99 is the mobile number registered with Message App. ” 


Raju opens his MesogeApp and sees a welcome message from 
‘a number with the poster of XVZ Bank as its profile picture and 


Raju: “Wow! That's omazi 
¥ te the bank's tagline as its status 


Yes, This is my 
MessageApp number.” 


Fraudster. "Okay Sir, 

We have already sent 

you a welcome message 
‘on Message App. Please check 


Fraudster: "Please enter the details of your debit card for verification 
You do not have to share the details with me but enter it only on the official 
‘MessageApp number.” 


| Raju: "I have entered it | 


Do's: 
vy Be cautious while responding to calls from unknown numbers seeking 
our account details. 
yv Report to your home branch immediately on realizing the fraud. 
Block your account to prevent further financial loss. 
v Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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Fraudster: “Great Sir. Please wait for 2 minutes, | 
Twill update your details, ‘ 
You will receive an OTP for activating the 
‘MessogeApp banking feature, 
Please share the OTP.” 


Raju: "XXXX is the OTP. 
When will T get the gift?" 


Fraudster: "Your Message App banki 
and you will receive your gift within two days 


Raju notices a debit message of Rs 20000 in his account. He immediately calls back, but the phone is switched off. Raju realizes that he 
has been duped, 


Don'ts: 

> Don't trust unknown callers offering easy banking services and sending 
texts through Messaging Apps. 

Don't share card details and OTP. 


Office of RBI Ombudsman, Mumbai -IT 
https://ems.rbi 


17. FRAUDULENT LOANS WITH 
STOLEN DOCUMENTS 


We are providing personal loans at an interest rate of |) 
5 percent r 


ee 
Fraudster: "Hello Sir, I am Ramesh from XYZ agency. |p Raju: "5 percent only! Okay, T need the loan,” 


Do's: 
y Always monitor the end-use of the documents in the transactions. 


vy Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Raju: After a month, Raju receives a letter informing him 
Rs 10,000/- is due for the loan 


Don'ts: 
X Never share your confidential details like the Aadhaar number, PAN number, cheque 
book or cheques with unknown persons. 
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18. BETTING SCAM 


Raju was excited for the Raju searches for JKL betting groups 
on the internet. 


latest season of JKL cricket. 


The new JKL cricket 
season is here. 

There are many stories| 
of easy money through 
betting: 

I must try it. 


Welcome, Mr Raju. 

We are glad you 

enquired about “T want to place a 
the betting. bet for this 
How may I help you?" JKL season.” 


Fraudster: “First, you need to register on XYZ betting.com| 
and as a welcome gift you will receive Rs 5000 
on your first recharge of minimum Rs 5000." 


Do's: 
v In case scammed by a fake app/website, one should immediately call his/her 
bank to block the card/account/UPI service to prevent further transactions. 
v Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in 
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and gets co! 
by merely looking at the 


Fraudster: “We have not received your 
amount. Kindly expedite the payment to avail 


Raju: "Yes, I have installed the App| 
jjust paid Rs 5000 as instructed. 
When will I receive the additional 
credit in my wallet?” 


“It seems little suspicious 
but i will wait till morning" 


However, Raju got duped and never 
heard from the fraudster again. 


Don'ts: 
One should not make payments on unknown websites. 
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19. FAKE VACCINATION CALL 


One day, Raju received a call from 
an unknown number. 


“Tam calling from the Local health Centre| “Oh! Okay, But we can do 
We are calling to provide the vaccination EOWA Aan eaii right?” 
facility at your home.” 


"Yes Sir, but the home vaccination facility a 
“No Sir, it is free of cost. 
is not available on the App. £ will verify your address 
and you will get registered 
for the vaccine, 
Please tell me your Aadhaar 
and PAN card details.” 


Do's: 
v Read the entire SMS to read the purpose of OTP. 
v Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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“My Aadhar number is 1234455, 
and my PAN card Number is adf1234." 


“Thank you, Sir, Please wait 
I am registering your Aadhar and PAN card, 
you will get a registration OTP code. 
Please share that." 


\ 


“Thank you, Sir. You have successfully 
(Raju received an registered for the vaccine, 


SMS- your verification code is 1234) ana you will get @ confirmation zoan. 


Please share the code when our health 
officials visit to vaccinate you." 


"Yes, it is 1234." 


The call got disconnected. 


The fraudster tricked Raju into sharing his PAN number! 
After some time, Raju got an SMS 


and OTP for taking a loan of Rs-50,000 

on behalf of Raju. Taking a loan based on Raju's 
PAN number makes Raju liable to pay back the 
loan to XYZ Company. 


Don'ts: 


* Don't share your Aadhaar, PAN card details and OTP with strangers. 


PAN card-based OTP is used for various financial services including cash withdrawal from bank 


accounts. Therefore, it is extremely important to protect your confidential details like Aadhar 
and PAN cards from fraudsters. 


Office of RBI Ombudsman, Mumbai -II 


https://cms.rbi.org.in/ 


20. COVID TESTING- FAKE ONLINE SITE 


Raju wanted to do the Covid-19 test at hoine. He searched on the internet for 
diagnostic centres that provide home testing facilities. 


“Welcome to ABC Diagnostics, 
Please provide your address for sample collection.” 


“Hello, I want to book 
a Covid-19 test." 


ly address is 25, 
ABC Lane, Mumbai, 
Maharashtra, 

What will be the cos’ 
for the test?" 


“It will cost Rs 1000 plus home 

collection charge of Rs 100. 

Also, you must pay Rs 550 

t oayance fi hy e ae ink As it was urgent for Raju to get tested, he agreed 
to pay the advance amount.He paid the said amount} 


for pre-booking with you," 
using his debit card on the link provided. 


Do's: 
v Always book any kind of test through registered pathology laboratories only. 
¥ Report the incident to the nearest Cyber Crime Police Station and 


National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 


39, 
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Thereafter, the person disconnected the call and switched off his number. 


221178725 


Raju got tensed, and he searched 
the helpline number on the 

ABC Diagnostics site but 

couldn't find it. 


Raju eventually 
realized he was 
defrauded. 


Don'ts: 

X Do not make a payment in advance when you are doubtful. If anybody asks 
for an advance payment, it is a matter of caution 
and one should go ahead with those transactions with requisite precaution. 
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21. FRAUDSTERS IN THE PRETEXT OF 
RECOVERY AGENTS 


Fraudster: “I am recovery agent from 
XYZ Bank. It is seen that you have 
defaulted repayment of loan dues. I am 
here to officially seize your vehicle.” 


Raju had bought a motorcycle using a 
vehicle loan availed from XYZ Bank. 
However, Raju lost his job and was 
struggling to repay the loan EMIs 
One day a fraudster disguised as 

recovery agent of XYZ Bank 
approached Raju at his residence. 


“No No. This is bank's procedure. You 

have around Rs.20000 dues. You will 

have to pay at least Rs.5000/- now or 
Twill have to take the vehicle." 


Raju: “Oh no. Please don't seize my 
vehicle, I have missed last few EMIs 
las I had lost my job. I have got a new 

job offer at hand and I promise 
to repay from next month." 


Do's: 

v Always ensure identification of Recovery Agents before making any payment / 
commitment. Check whether agent carries a copy of the recovery notice and the 
authorization letter from the bank along with the identity card issued to him by the bank 
or the agency firm. You can also cross verify with the home branch over phone. 

~ Report the incidence to the nearest Police Station and your home branch. 
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“Okay. I will pay Rs.5000/- 
now and remaining in next few months. 


“Ok sir. I am doing this as a special 

favour. You can collect the receipt 

ard pending dues position directly 
from the bank branch” 


low come? I have already 
paid Rs.5000/-few days 
before to your agent” 


Don't's 


"Good evening Sir. I am Ravi, RecoveryAgent 
from XYZ Bank, Please see this recovery 
notice issued by bank stating that you have 
missed your last three EMIs and bank 
may go forward with seizure of vehicle. 
You may either pay directly at the bank or 
hand over to me against receipt." 


“That is not possible sir. I am 
the authorised agent for XYZ bank in this 
area, Please see my ID Card and the 
authorization letter from the bank for 
recovering dues. Did you see his ID? Do 
you have any proof of making payment?" 


a y 
“Oh Noll! 
I trusted him blindly!” 


Never make any cash payments to bank/ recovery agents without proper 


acknowledgement of receipt. 
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“Iam calling from the agriculture 
department. Your account details have not 
been updated for the KISAN scheme, 
hence your subsidy funds around 12000 
Rupees are lying unused with us." 


“What should I do to 


update the account?" “You can visit the website and update 


on your own, or else, I will update it if 
you provide me your details.” 


Do's: 

Y Verify the details of any government scheme from your Gram Panchayat or 
Tehsildar of fice before making any payment for getting the subsidy. 

~ Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in, 
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“Please update it “Kindly provide your bank account and 
from your side." debit card details.” 


"You will 
receive an 
OTP; please 


Raju provides the details of his bank account, debit card 
and shares the OTP to the fraudster 


A few minutes later, Raju received an SMS 
from the bank saying Rs 25,000/- 
was debited from his bank account 


00 
\NR 25,000! 
DEBITED FROM 
NO:XxxK! 
MON Ox-K1-22 


Raju was cheated under the pretext of 
registering for a social welfare scheme. 


Don'ts: 

Never believe in such stories of getting subsidies over calls. 

The eligible beneficiary data is already available with the State Government. 

The government will provide you with the benefits after you register yourself at Jan Seva 
Kendra of your Tehsildar office in your district or gram panchayat. 

Never share your OTP with anyone. 
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23. MULTI-LEVEL MARKETING (MLM) SCAMS 


Raju's friend Krishna visited him to 
explain about a scheme with good 


“Hi Raju! I came across a 
earning potential. 


fantastic opportunity to make 
money with minimal 
time and investment." 


“Is it? Sounds excitingl!! “You must buy XYZ company 
Tell me more about it. I products for Rs 20,000, and you will get 
want to know everything." a mobile phone of Rs 10,000/- for free 


After you enro! three more people,you 
will get a commission of Rs 3,000 
per person as you bring more and more 
people under the scheme." 


Do's: 

W Stay away from people trying to get you into these kinds of schemes. 

wW Verify the authenticity of the Multi Level Marketing scheme. Some of the network marketing 
schemes, like Ponzi scheme, Pyramid scheme etc., are illegal in India under the Direct Selling 
Guidelines, 2016 and the Prize Chits and Money Circulation Schemes (Banning) Act, 1978. 

~ Politely say ro, even if the proposer of such a scheme is your friend or relative. 

~ Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in, 
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“This is a fantastic way to 
make money.I don't have to work 
every day as the agents recruited by 
me will be working on my behalf, 
and I will get commission 
on sales made by them." 


“Yes, Raju. Therefore, I am visiting 
you, You may join my team as my agent." 


However, sales were dismal and nonexistent 
Raju immediately filled up the form and He could not accomplish the targets set 
agreed to become a direct selling agent of by the company of recruiting 3 more agents, 
the multi-level marketing company and he lost Rs 20000 as the products 
bought by him from the company also could 
not be sold. He did not get any mobile either. 


Don't: 


X_ Do not pay money to unknown companies and enrol in unknown schemes. 
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A fraudster advertises jobs over the internet and 
social media with attractive pay for working from 
home. (Earn Rs 1000 per day working from home). 


“Sir, thank you for registering with our agency. 
We have gone through your CV, and you are selected 
for the work from home job, You need to provide your 

Aadhaar and PAN card details, You will also have to 
fill up some forms and sign some documents 
as per our company policy.” 


24. WORK FROM HOME SCAM 


Raju is very excited after coming 
across the advertisement and 
clicks on the link to register for 
work from home. Raju receives 
acall from a stranger. 


“Thank you. I will fill all the 
forms and send you my address 
proof and PAN card details," 


Beware of short URLs, information requested on Google forms from unknown sources. 
Look for poor spelling, grammar in emails, SMS, and portals. 

Be cautious of the links/forms asking for personal information. 

Always check the header of emails for verifying the genuineness of the offer or entity. 
Report the incident to the nearest Cyber Crime Police Station and National 

Cyber Crime Reporting Portal at https://cybercrime.gov.in. 


Office of RBI Ombudsman, Mumbai -IL 
https://ems. 


"You can start working from tomorrow. You need to 
upload your work on the www.workfromhome.com portal 
Here is your User ID and password. You also have 
to provide a security deposit of Rs 10000." 


Raju makes the payment of Rs 10000 
as a security deposit to the fraudster. 
The job progresses smoothly for a week 
Raju kept receiving regular payments. 
He got 7000 Rs as remuneration, 


In the next week, the agency started identifying 
mistakes; they consolidated the errors and produced a 
bill of Rs 1 lakh as compensation to the agency as 


per the terms and conditions of the 
contract signed by Raju initially. 


He got calls from ‘lawyers’, ‘police’ 
threatening legal action 
Raju started receiving multiple harassment and and then, terrified with all this, 
recovery calls from different numbers ina single day. Raju paid Rs 1 lakh to the fraudster. 


Don'ts: 

Never send sensitive, personal, or proprietary information (Aadhaar or Pan card) 
via email to unknown people. 

Never sign any online agreement before consulting a lawyer. 

Never pay to get a job, genuine firms never ask for deposits 


25. ONLINE SHOPPING FRAUD 
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One day, Raju received a message from an unknown number advertising 
mobile phones at a very cheap price.Out of curiosity, Raju clicks on the link 
and was surprised to see smartphones at a 50% discount, 

Raju contacted the number mentioned on the website. 


"Hi. I visited your website ABC, 
and I am looking for a new 


“Ohl Then I would like to 
purchase a V20 mobile phone.” 


smartphone." 


“Sir, thank you for showing interest in our 
website. Our company gets the phone 
directly from the manufacturer, 
so you will get the best price 

on our website.” 


fer 


"Sir, I would like you to look at 
this year's best-seller phone, 

i.e. S20 FE. Sir, this is the 

best smartphone in the market. 
Tf you place the order within one 
hour by making full payment, then 
you will receive another 50% 
lamount as cashback after delivery 
of the mobile phone.” 


Do's: 


v Always shop from secured websites. It is recommended to make sure the 
websites show a tiny lock icon or ‘https’, in the checkout browser, 
indicating transactions are secure. 

¥ Report the incident to the nearest Cyber Crime Police Station & National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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"Okay. What is the price of the phone??" 


“Sir, the current market price of the phone having 

the same features is more than one lakh, 

but we are selling the same for just Rs 50,000/-. 
You will receive a cashback of Rs 25,000/-" 


“Okay. I will think about the 


“Sir, that offer is valid for the next 50 minutes, 
same and will let you know." 


and only a few phones are left in stock. 
You must place an order immediately and 
make payment to avail the offer.” 


(Raju reasoned he can't afford a phone costing Rs 50000, 
but he again thought that he will receive 50% cashback after delivery 
of the mobile phone, so this is an excellent deal for him.) 


"That's a great decision, Raju made the payment 
Okay, I will immediately Sir, Iam sending you a and waited for the delivery 


make the payment." link for payment. of the product, But he _ 
Please make your payment never received any mobile ! 
at the earliest.” 


Don'ts: 

X Never do online shopping from unknown websites. 

X Never buy anything from online sellers that accept payment only by gift cards, money 
transfers, etc., as such payments are nearly impossible to trace and 
reverse. 


X Never pay in advance to unknown sites, as chances of getting a product are 
negligible after payment has been done. 
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26. FRAUD USING PUBLIC WI-FI 


Tt was a Sunday. Raju and his family were in the shopping mall. Raju bought some 
clothes and groceries and went to the reception to make the payment. 


“Your total bill is Rs 12000, Sir. 


How would you like to pay, card ar eg 
or cash?" T will pay online. 


RECEPTION 


“Sir, you can connect to the free 
Wi-Fi if your network is 
not working.” 


Raju initiated the payment 
but there was a network issue. 


“Iam facing connectivity 
issues during the transaction. 
Can you help me with this?” 


Do's: 

vy One should always use a secured Wi-Fi network. 

vy Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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Raju connected to the free Wi-Fi 
and completed the transaction.” 


Raju was happy. His day was spent well. 
After some time, he started receiving 
SMS alerts from his bank. Rs 14000/- and 
Rs 10000/-were debited from your 
account.’ Raju was confused. 


The last transaction he made was Rs 12000/-at the mall, and these transactions 
were different. He told his son about the messages. 


“What was the last transaction, “You used Wi-Fi for the fi | 
Dad, and where did you do that?” (ka S mee £ Meet ae eS: 
transaction? That is not safe, Dad. Hack- 


as 
\\ ee ers use this Wi-Fi to get access to users 
e 
oe data and use it for illegal purposes." 


oN 


"I made the last transaction at the 
shopping mall; I paid the bill online. 
My network was not working so I 
connected to free Wi-Fi and made 
the payment." 


ry “When you used the * WI 
Really? I was not Wi-Fi Retwork for the Chemises 


ware of that, son."||}} financial transaction, 
some hacker got access to What can we 


your personal data and used y 
for unauthorized! “We must immediately, 
from your bank account. ver Dh aa bce 
That's why you are é your account,” 
these messages.” sas 5 


(Raju became a victim of 
hackers by using public 
Fi for financial transactions.) 


X Do not use public Wi-Fi, especially while doing financial transactions, It is easy to 
hack into a laptop or mobile device that is on a public Wi-Fi connection with no 
protection. Hackers can read your emails, steal passwords and other credentials. 


DIWALI BUMPER OFFER - 
THREE BRANDED 
WATCHES WORTH RS 
2500/- FREE FOR EVERY 
SINGLE WATCH 
BOUGHTI! HURRY UP! 
LIMITED PERIOD OFFER! 
Please call 
Phi 90xxxxxxx99 
for more details! 


“Hi. I came across your 
Branded watch offer. 
Where is your location? 
I can come down to your 
store for the purchase." 


Do's: 


“Wow!! This seems great! 
I can buy one watch 
and get 3 free! Anyways, 
I wanted to give gifts to 
my cousins this Diwali holiday 
when I go home! I'd 
better call before the offer ends.” 


“Sir! You are lucky. 
We are about to close the offer. 
You need not come here, 
Sir. We will deliver you 


the product at your address." 


v In the case of branded products, verify the advertisements on official websites. 


v For non-branded product advertisements, make a payment only after a personal visit 


to the shop or on delivery. 


»~ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 
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“That's great! Please send 
me pictures of the watches." 


“Okay. I have shared 
my address, 
T'll send the money 


“Sure, Sir. I have shared 
them already. 
T have also shared account 
details 
for transferring the amount. 
You must pay Rs 3000 
to confirm the order. 
Once payment is successful, 
we will deliver the watches 
within 3 days. Hurry up, Sir. 
The offer ends in 
another 30 minutes. 


Happy Diwalil!” 


"Oh no! Why haven't they delivered 


yet!l? Their phones are switched 


of f..How do I trace them nowl!? T 


think I have lost the money!" 


Raju indeed lost his money. 


Don'ts: 


X Don't be misled by tall claims made in advertisements. Check and 
verify before committing your hard-earned money. 


X Do not pay any amount unless you receive the product. 


28. FAKE LOAN OFFER 


Raju is a humble farmer trying to make both ends meet. 
One day, he received a call from a stranger. 


“Hello, Mr Raju. We are calling 
from xyzzy Pvt Ltd. 
We have introduced a scheme “Oh! Okay. That would 
for farmers in your region. be helpful. 
You have been found eligible What is the offer?" 
for availing a loan from our 
company at a subsidized rate." 


“We offer special loans up 
to Rs 5 lakhs at an interest of 
just 3%! For availing this loan, 
you need to share your bank account 
and Aadhaar details for verification." 


Do's: 

v Always check the details of the lender (like their physical address/of ficial 
website, etc.) before availing their loans. 

vy Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in. 


Office of RBI Ombudsm: 


jumbai-IT 
http: 


1s.rbi.org.in/ 


“Sir, this offer is valid 
only for today. 

You need to senda 
processing fee 

of Rs 5000 immediately 
to avail of this offer. 

TI have shared the account 


details for transferring 
the fee." 


“Oh! Is that so? 

Then T'll send the 
processing fee now. 

T will also send the rest 
of the details to your 
number soon." 


Raju makes the payment. However, even 
after weeks, he does not receive any 
response from the company, and the 

number from which he received the call 

no longer exists, 


“Okay, Sir!! We will update 
you on the loan application 
within a week! Thank you.” 


Never make any upfront payment for sanctioning your loan. Banks and 
Financial Institutions never ask for advance fee for loan approval. 


Charges, if any, will be deducted from your loan money and balance amount 
will be transferred to your account. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.o1 


29. CREDIT CARD ACTIVATION FRAUD 


“Hello, Mr Raju. I am calling 
from XYZ Bank.Congratulations on 
your new credit card, Sir!" 


“As per bank's policy, I am 
calling you to activate your new credit card 
through call. You need to confirm the details of 
your card, following which you will receive an 
activation code, Upon entering the code, your 
card will be activated.” 


(Raju DEJ pe end got delivered a XYZ bank 
credit DEJ pe end 


Raju (believed the fraudster 
as he already had his “Your name is Raju Deshpande. 
credit card details): Your address is Lower Parel, Mumbai?" 


“Okay. Please 
activate my card." 


Do's: 
~ Call the bank to block the card/bank account/UPI services to prevent further monetary loss. 
~ Send an email /letter / visit your home branch to report the incidence. 
~ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi 


"Your card number “Thanks for the confirmation. 
starts with 45, Kindly Kindly confirm the expiry date and card 
confirm the number.” verification value (CVV) 

written behind the card.” 


ao < 


“Yes, the expiry 
date is 01/25 and 111 
is the CVV number,” 


“Thanks for the confirmation. Your 
card is activated now, and you will 


receive an SMS regarding this wit! 
the next hour. Have a nice day!" 


“Thanks for the confirmation, Sir. Raju received an SMS from his bank, about 
You aust have recelvad a ous for the debit of Rs 1.2 lakhs on his credit card. 
inal activation. Kindly confirm 
the code received on your phone." Here, Raju was defrauded under the 
pretext of credit card activation. 


Don'ts: 

Never share your Card details and OTP to anyone. 

Don't trust unknown callers for your credit card activation, Credit cards can 
be activated from your mobile banking application. 

Don't share your card details/OTP with anyone, banks never ask for OTP. 


Office of RBI Ombudsman, Mumbai -II 
https://cms.rbi.org.in/ 


30. CREDIT CARD LIMIT UPGRADATION FRAUD 


Another day, Raju received a call from the bank. 


Hello, Mr Raju. 
Tam calling from XYZ Bank. 
Congratulations, Sir. 

Your credit card is 

eligible for a limit upgrade." 


“Oh, thanks. 
What will be the new limit?" 


. 
Pavel 
WS : 
A. pee XN 
VA Vy } 
“The new limit will be LE ZF 
increased to Rs 5 lakh 
from your current limit |W a 
of Rs 1 lakh." ~ 
(elt: 
eal 
i= 
caer 
ry | 
“Oh, that's great!" 
Do's: 
wv Immediately call the bank to block the card/account/UPI service to prevent further 
transactions. 


Send an email /letter / visit your home branch to report the incidence. 
~ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 
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Office of RBI Ombudsm: jumbai -II 


https://ems.rbi.org.in/ 


“Sir, you'll need to confirm 
the free limit upgrade code 
which will be delivered to you. 

Shall I proceed?” 


“Thanks for the 
confirmation. 
Your card limit is 
upgraded now, 


and you will 
receive an 


SMS regarding 

this within the 
next 2 hours. 
Have a nice day!" 


“Your card number is 
4500 1000 1000 1000. 
You must have received 
an activation code in 
SMS. Please share. 


“Yes, it's 123456." 


y 
oxi 
460 | 


WS Ei ZV 


Sometime later, Raju received an SMS from his bank about 


debit of Rs 70000 on his credit card. 
He was cheated by the fraudster. 


Aw xP £0 
e 423) 


X_ Don't trust unknown callers for credit card activation / limit 
enhancements. 
X_ Don't share your card details/OTP with anyone. 
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Office of RBI Ombuds: , Mumbai -I1 
https://ems.rbi.org.in/ 


31. SAFE GUARDING YOUR AADHAAR CARD 


One day, Raju went to his bank branch to get his Raju submits the required documents. 
‘Aadhaar card linked with his bank account. 


“Please submit the Aadhaar linking form 
and photocopy of your Aadhaar card 


Also, show me your original Aadhaar card." 
“I want to link my Aadhaar 


card with my bank account.” 


“Tell me the OTP you received on 
your registered mobile number." 


“But I did not receive any OTP. 
Can you please check the mobile 
number linked to my bank account?" 


“The OTP was sent to your 


registered mobile number.” [J “Let me check. The mobile number 
linked to your account is 98"**25621." 


Do's- 
~ Verify the mobile number linked with your bank account, 
~ Check your bank statements and passbook regularly to identify any suspicious activity. 
~ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi. 


“But this is not 


my mobile number,” “Last time when I visited the bank to submit 


my KYC form, a gentleman in the bank helped 
me fill the form and submitted it for me.” 


“You visited the 
bank last week.” 


“The form you submitted may “I had no idea about this. 
have his mobile number, and your bank account I made such a big mistake. 
is linked with that number. He can easily What can I do now?" 
misuse your bank account. You should have 
checked that form before submitting.” 


“Please submit a form for 
changing your registered mobile 
number" 


XX Don't share your confidential details like Aadhaar and bank account details with strangers, 


Office of RBI Ombudsman, Mumbai -II 
https://cms.rbi.org.in/ 


32. ONLINE FRAUD USING CASHBACK OFFERS 


Raju is very active on the internet and always prefers 
online shopping as E-commerce websites provide 
attractive offers on their products. 


“Hello Sir! I am calling from reac 
ABC.com. g you so much... 
Sir, we are glad to inform 
you that we are providing 
you with a 50% cashback on your 

recent purchase from ABC.com." 


“Okay, so tell 
me. When 
will the 

cashback be 
credited to 
my account?” 


“You are our valuable 
customer, Sir." 


“It won't take much time, Sir. 

You need to open the app, 

and there will be a pop-up message 
regarding the cashback." 


Dos- 
v Inform your home branch and block your account to prevent further 


financial loss. 
|v Report the incident to the nearest Cyber Crime Police Station and National 


Cyber Crime Reporting Portal at https://cybercrime.gov.in. 


of RBI Ombudsman, Mumbai -I1 
ms.rbi.org.in/ 


“I've opened my app now. “That is correct, Sir. 


2 Fi We must take your 

Tt is showing a payment approval to credit cashback 
request of Rs 20,000/- in your account. 

to abc.com" So please click on Pay.” 


“Ok it is aski ' 

pea at ore ng “Please enter your PIN 
Y 3 as it is just for 

verification purposes.” 


“Thank you, Sir. You will 


shortly receive credit 
in your account." 


(The moment Raju entered his UPI PIN, an amount 
of Rs 20,000/- was debited from his account. Raju 
tried calling the Fraudster but was unable to connect.) 


Don'ts- 


X Don't believe the caller blindly; one should verify the company’s official website to 
check the authenticity of the offer. 


X Don't enter or share UPI PIN for receiving payments as it is required only for 
sending payments. 


, Mumbai -II 
ns.rbi.org.in/ 


Raju wanted to book a hall for his daughter's “Yes, rental options are 
birthday party, so he searched on the internet available for the banquet hall,” 
for the available options and entered details 
for enquiry.After a few moments, Raju got a call, 


"Hello, Iam speaking from XYZ Hotel 
you inquired about bookings 
on our website, how can T hel 


“I wanted to ask about the banquet “What are the charges? 


hall at your hotel. Is it available on rent?’ Twant to book it for 
my daughter's birthday.” 


——7 


*We charge on an hourly basis. “Yes Sir, it is available. As a pre-booking 
It is Rs 2500 per hour,” process, you will have to send me 
/ Rs 1000/- to generate a token number.” 


will come to your 
office for the paymen 


Dos- 
v Always verify the authenticity of a person/institution offering any deal or offer. 
wv OTP SMS will have other details like amount / merchant name / beneficiary name 
of intended transaction, Always read the OTP SMS alerts thoroughly before use. 
wv Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.r 


“There is a 20% discount if you pay “Tell me your 16-digit card number 
online through your credit/debit card." CVV and expiry date on the card.” 


“The 16-digit number is 5869*********456 
CVV is 256 and expiry date is 11/24,” 


“You will get an "Your booking is confirmed, 
OTP; please share it." Sir. You will shortly receive an SMS." 
~y 


After some time, Raju received SMS alerts 
on his phone. ‘Rs 50,000 was debited from 
your accountRaju immediately called the 

person, but he did not answer. Raju realized 


“The OTP is 4256." the person was a fraudster, and he should 
= => not have shared any card details with him 


Don'ts- 
X Don't share your Credit/Debit card details and OTP with 
anyone. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


34. CHARITY FRAUDS 


Raju is a Government school teacher. 


He came across a news report that Actor Monu 
was gifting smartphones to government school students. 


Raju searched on the 
internet about the 
= SSF S =] actor's charity 


Actor Monu gifts 100 ahd Cole eve 


smartphones to Government number. 
school students 
MONU | 
charity 


| Foundation | 


“Hi Sir, This is his 
office's number. 

“Hello, Sir. Is this actor Tam his personal 

Monu's charity foundation??" How may I help you?" 


Always cross-check charity organizations’ credentials on the Goverment website 
/database to see if they are genuine or fake. 

v Always be vigilant because the fake website may look almost identical to a genuine 
charity site, changing only the details of where to send donations, 
Scammers often use high-pressure tactics, such as stressing the urgency and using 
highly emotive language. Always be cautious of anyone claiming that donations need 
to be immediate. 
Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in 


67 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


“Sir. I am Raju, calling from xxxx “Oh yes! Thank you so much 
government school. I saw the news for reaching out to us on 
of your charity to the students. Sir, behalf of poor children. 
we have 100 poor students in our T assure you of help.” 
school who cannot afford laptops / 
smartphones. Can you please help us, 
Sir"? 


“Okay, Please share your address, 
We will send you 100 smartphones. 

However, you will have to pay a 
token registration charge of 

Rs 50,000/- today itself for us 

to send the phones. 

The phones will be delivered ina 
week, and we will refund the 
registration fee after delivery." 


“Okay, Sir. I'll send 
you the registration 
fee right away. Please 
share your account 
details." 


Raju transferred the funds, but he later came to know that no 
such mobile phones were donated to government school students. 
Raju realised that he had been duped by fraudsters under the 

pretext of charity. 


Don'ts- 

X Don't call on a random number based on a google search 
without verification. 

X Don't send money upfront without verifying the 
authenticity/genuineness of the claim. 


, Mumbai -IT 
://ems.rbi.org.in/ 


35. OVERDRAFT AGAINST FD 


Raju is a senior citizen, who had recently 
retired from his job and received a large sum 
of superannuation money, which he wanted to 
invest. One day Raju received a call from 
someone, pretending to be the employee/agent 
of a reputed bank, advertising a new scheme 
with a high interest rate. 


“Yes sir, this is a special scheme 
for a limited period only." 


“Hello! Are you sure I will get a 9% 
interest rate? Because no bank is 
giving more than 7.1% interest.” 


Raju: "Okay, I will visit the 
bank and open a Fixed deposit.” 
“Sir, our bank will send a 
representative to your home since 


you are a senior citizen.” ae 
OAL OG CSCI Cree Raju: "No, I can't hand over 


my money to an unknown person." 


Check all documents before signing. 

Prefer visiting the bank branch or performing transactions over internet banking 
with the assistance of known person. 

Report the incident to the nearest Cyber Crime Police Station or National Cyber 
Crime Reporting Portal https://cybercrime.gov.in in case of cybercrimes. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


“Sir, there is no need to hand over any morey. 
You just need to give a crossed cheque will 
ensure that your money is not withdrawn by cash 
and deposited only in the fixed deposit account.” 


“Okay. Tell him to 
collect the cheque.” 


The fraudster poses as a representative of 
Raju and uses the overdraft form signed by 
Raju, which has fraudster’s account 
number for credit of the overdraft 


Don'ts: 


The fraudster visits Raju's home to 
collect the cheque and takes signatures 
on different forms, which Raju 
does not check before signing. 


After a day, the fraudster visits the branch 
as a representative of Raju and deposits the 
cheque for creating a fixed deposit. However 
he gave fake fixed deposit receipts to Raju 
and kept the original ones with himself 


After a day, Raju got an SMS regarding 

an overdraft issued against the FD and upon 
visiting the branch, he wes shocked to know 
that the FD receipt he had received was fake. 


X Do not hand over important documents/cheques to unknown person. 


One day, Raju received a message seeking his willingness 
to do freelance work. As Raju was unemployed, 
he immediately dialled the number mentioned in the SMS. 


“Hi, I received an SMS 
regarding freelance work. 
What is the work profile?” 


(This is very easy, even my 
kid can do it.) 
“Okay, I am interested." 


After downloading the application, Raju started working. 
The work seemed genuine; however, he did not know that the 
fraudster was observing all his activities on his laptop 


Over time, the fraudster was able to get all the 
secure credentials from Raju's device 
through his application. Unaware of the malafide intention, 
Raju continues fo use the application. The fraudster was also 
able to get the OTP sent on Raju’s email since 
the fraudster got access to his email 


Do's: 


v Verify the authenticity of the offer on the official website of the concerned 


entity offering jobs. 


v Report the incident to the nearest Cyber Crime Police Station and National Cyber 


Crime Reporting Portal at https://cybercrime.gov.in.” 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi. 


After a few days, Raju received SMS alerts stating 

Rs 50,000 was debited from his account Raju had 

no clue how his account was compromised or money 
was debited. 


After investigation, it was found that his device 


contained a malicious application, observing all his 
activities and the passwords were being skimmed. 


Don'ts: 

X_ Do not download any application through links sent via SMS, email or 
instant messaging applications, especially from strangers, without 
verifying its authenticity. 


, Mumbai -II 
ns.rbi.org.in/ 


37. ILLEGAL LOAN FINANCING APPS WITH EXORBITANT 
INTEREST RATES AND HARASSMENT TACTICS 


Raju and Ramu were best friends. One day. 
Raju met Ramu and told him about his financial problem: 


Raju: "I need money 
urgently: what 
should I do?" 


Ramu: “No need to panic Raju: “Oh, that's great! Quick money 

my friend. Many mobile apps without any documents! Not even the 
offer immediate loans without credit score is being checked, I will 
any document or security.” immediately take a loan of Rs 5000/ 


app without veri 
registered one. He gets Rs. 5000/- in his Bank account within no time. 


Be cautious while downloading any app and providing the app permission to access data from 
your mobile phone. 

Always check the registration status of the company/NBFC whose application is being used 
to provide loan and terms and conditions before availing loan from that NBFC at 
https://www,rbi.org.in/Scripts/BS_NBFCList.aspx. 

Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in.” 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


Within 7 days, Raju started receiving 
calls for repayment of Rs 7500/~ “Iwas under the impression that 
Raju still had not arranged money to repay the old Twill repay my loan amount along with 
loan and gets shocked by the demand nominal interest charges, but this app is 
of Rs 7500/- as repayment for the Rs 5000/- loan charging exorbitant interest and m 
Raju approached another friend, Laxman other charges. What shall I do now?" 


Oh! Did you verify whether 
the entity is registered with RBI 
or have any other valid registration? 
Else, they would not be covered under 
‘any rules, and you are bound to pay 
as per the agreement only. Always 
check whether the finance 
company (NBFC) is 
registered / licensed by RBI 


Don'ts: 


Be cautious and don't take loan if any mobile app is providing a quick loan 
without checking any document and credit score, and always check the 
interest rate charged, 


Office of RBI Ombudsman, Mumba 
https://cms.rbi.or; 


38. CARD CLONING AT MERCHANT OUTLETS 


One day, Raju went to a restaurant along with 
his friend for lunch. He called the waiter. 


“How can I 
“Welcome, Sir. 


help you, sir?" 
Please have a seat." 


“Could I see your 
menu card?" 


“Sure, sir. 
This is our menu card." 


\@ 


\ 


Do's: 

Always hide your pin number while transacting through 
debit/credit card. 

Change the PIN at periodic intervals. 

Always ask merchants/dealers to swipe the card in your presence. 
Report the incident to the nearest Cyber Crime Police 


Station and National Cyber Crime Reporting Portal at 
https://cybercrime.gov.in.” 


Office of RBI Ombudsman, Mumbai -II 
https://c 


“Sure, sir. We have a POS 
Machine, please give 


“Sir, the bill me your card.” 
amount is Rs 2000." 


“Can I pay by 


(Waiter took the card, walked away from Raju and 
swiped the card ina skimmer when Raju was not 
paying attention.) 


“Sir, please provide 
the PIN for the card.” 


“My pin is 


Later; the skimmed details of the card were given to a fraudster 
who cloned the card with all the card details and used those 
details to siphon off money from Raju's account. 


Don't: 


X Do not share your credit card/Debit card PIN with anyone. 


X Do not let credit and debit cards out of your sight. 


Office of RBI Ombudsman, Mumbai -IT 
https://ems.rbi.org.in/ 


39. FRAUD THROUGH DETAILS SHARED WITH 
KNOWN PERSON/FAMILY/RELATIVES 


Raju is a very friendly and helpful person, 
but he is ignorant when it comes to facet siicard 
e-commerce website, It requires a creditcar 
abla ie itanciel ecedentials'ct fi issued by abc bank.You are using this card 
banktde tals: Ohe‘dey Rajureceivedia.ca Can you send me the details of your credit 
from his friend, Keshav. card over phone? I will pay you later.” 


“There is an exciting offer on xyz 


“Hello, Raju 
Are you free to talk?" 


“Okay I will send the 
details of my card.” 


"p 

SY Raju’s friends always use his cards to 
A 
avail discounts of fered by e-commerce 
Raju shared a photo of his websites, and he often sends his 


credit card with his friend. card details to his friends over the phone. 


Do's: 
vy Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in." 


vy Change the PIN at periodic intervals. 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


Raju registered a complaint with 
After a month, Raju received an the bank. The bank further informed 
SMS on his mobile number and was him that the disputed transactions 
unable to figure out where the card was used were done at an online merchant site 


Keshav: "Raju, just a few days back, 
I lost my mobile phone, and my phone 
has your card details. I am afraid 
that could have led to these transactions.” 


Raju realised that he himself had never done 
any payment at the online site, but he had 
shared his card details with his friends. 
Raju immediately contacted all his friends. 
but everyone informed him that 
they did not do the transaction. 


By Bo Re 
Ww ARD DEW 


“Oh! Keshav, you should have 
told me about this incident. I would 
have blocked the card. I should not have 
shared my card details over the phone." 


X Do not share your card details over social media or messaging apps 
even if the recipient is your friend / relatives / family. 


Office of RBI Ombudsman, Mumb; 
https://ems.rbi. 


“Yes, here is the 
“Can I make the oe. 
payment via the XYZ Pay: 
application by scanning 
the QR code 
of your shop?" 


~ Always check/confirm transactions by checking your bank account whenever 
a transaction is done through UPI. 

Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in." 


Office of RBI Ombudsman, Mumbai -II 
https://ems.rbi.org.in/ 


The customer scanned the code under a fake XYZ app. 
He generated a fake payment intimation/screenshot 
and showed it to Raju. 

Fraudster: “The payment is done.” 


At the end of the day, Raju cross-checked his 
shop account for reconciliation and found that 
one payment was not yet received in his 
account, Now he realized that he was 
duped by showing a fake screenshot. 


On this spoofing, Raju cannot even 
complain to the bank or give a fraud report, 
as the actual fund transfer never happened, and 
Raju does not have any details of the customer. 


Don't conclude financial transaction without actual receipt of fund. 


Office of the RBI Ombudsman (Mumbai-ll) 
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